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SYSTEM FOR CONTROLLING 
TRANSMISSION OF INFORMATION ON THE INTERNET 

This invention relates to Internet security and more particularly to a system 

for providing an Internet user with the ability to make informed decisions 

regarding Internet security. 

Background of the Invention 

The Internet has become a very popular method of acquiring information and 
providing a user with a convenient method of shopping from his home or place of 
business. When an Internet user "goes on line", he makes a connection through his 
server to the Internet and has the capacity of accessing the universe of web pages 
accessible from the Internet. When a user with an Internet processor accesses a 
web page, an Internet connection is made to the Internet server of the web page and 
the web page document is transmitted to the Internet processor of the user where 
the web page document is displayed. The user may then be asked for information 
by the accessed web page. Generally, an Internet processor can communicate with 
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an Internet server to which it is connected by Internet connection by either sending 
data to the web page server in batches or messages or by posting data to the 
Internet server. As used herein, the word "transmit" and "transmission" is used to 
refer to both the sending of data and the posting of data. If the web page is a 
commercial web site offering a product for sale, the web page document may ask 
the user to furnish a credit card number in order to complete the transmission. 
Normally, when a web page asks for private information or information that is 
normally maintained secret, such as a credit card number, the transmission of the 
information is set up as a secured transmission wherein the information transmitted 
by the user is encrypted. In order to protect the user from inadvertent disclosure of 
private information, the user is typically warned by a message on the screen of his 
Internet processor when information is about to be transmitted in an unsecured 
transmission and the user is given the opportunity to cancel the transmission of the 
information before the information is transmitted in the unsecured transmission. 
The user, however, is not notified as to where the information is being transmitted 
or what information is being transmitted in the unsecured transmission. 
Accordingly, it is sometimes difficult for the user to make an informed decision as 
to whether or not to cancel the transmission. The user may be expected to know 
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what web page he has accessed and what information he has selected to be 
transmitted to the web page, but he has to rely on his memory of the information 
when is warned of the unsecured transmission in making the decision of whether to 
cancel the transmission or not. Moreover, it is possible for the web page to which 
the user has made an Internet connection to obtain additional data from the user's 
Internet processor without the knowledge of the user and also to transmit acquired 
information to another server or web site. In addition, the server of a web page to 
which an Internet processor is connected by means of an Internet connection can 
operate the Internet processor to send messages composed at the server to other 
sites on the Internet. Such messages will bear the address of the Internet processor 
from which the message was transmitted as if the user of that Internet processor 
had composed and transmitted the message. Unscrupulous persons having access 
to the Internet have used this capability to transmit hate mail and pornography to 
third parties wherein it appears that the hate mail or pornography is being sent from 
a targeted Internet processor and the transmission occurs without the knowledge of 
the owner or user of the Internet processor. The above described problems of a 
server obtaining information from the user's Internet processor without the consent 
of user and of sending messages from the user's Internet processor to third parties, 
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can occur in secured and unsecured transmissions. Accordingly, there is a need to 
provide the Internet processor with better control over the sending and posting of 
data over the Internet. 



Summary of the Invention 

The present invention seeks to overcome the above described problems by 
providing information to the Internet processor user when information is about to 
be transmitted over the Internet to an Internet server. Specifically, a message is 
displayed on the monitor of the Internet processor, whenever information is about 
to be transmitted, indicating the Internet address to which the information is being 
transmitted and the content of the information being transmitted. The Internet user 
is then given the option to cancel the transmission or to allow the transmission to 
proceed. Because the Internet user is given the Internet address to which the 
information is being transmitted as well as the content of the information, the user 
is given the information he needs to make an informed decision as to whether or 
not to allow the transmission of information. 

Instead of providing the user with merely the option to transmit the 
information or not transmit the information, the user can also be given the option of 
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transmitting some of the information and canceling the transmission of other parts 
of the information. For example, if the information being transmitted is a credit 
card number, a password and the Internet address of the Internet processor, the user 
can select which of these, if any, he wants to transmit. 

Brief Description of the Drawing s 

The foregoing and other objects, aspects and advantages will be better 
understood from the following detailed description of a preferred embodiment of 
the invention with reference to the drawings, wherein: 

Fig. 1 is a block diagram showing the components of a personal computer in 
which the system of the present invention is used; and 

Fig. 2 is a flow chart illustrating the software and method of the present 
invention. 

Detailed Description of the Preferred Embodiment 

The system of the present invention may run on any Internet processor and 
typically will be used on a personal computer having a capability for Internet 
connections as shown in Fig. 1 . In Fig. 1 , the personal computer is designated by 
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the reference No. 10 and comprises a system unit 11, keyboard 12,a mouse 13 and 
a graphics display 14, which is referred to as a monitor. The system unit 1 1 
includes a system bus or plurality of system buses 21 to which various components 
are coupled and by which communication between the various components is 
accompanied. The microprocessor 22 is connected to the system bus 21 is and is 
supported by read only memory (ROM) 23 and random access memory (RAM) 24 
also connected to system bus 21. A microprocessor in the IBM PC series of 
computers is one of the Intel family of microprocessors including the 386, 486 or 
Pentium microprocessors. However, other microprocessors including, but not 
limited to, Motorola's family of microprocessors, such as the 68000, 68020 or the 
68030 microprocessors and various Reduced Instruction Set Computer (RISC) 
microprocessors, such as the PowerPC chip manufactured by IBM may be used. 
Other RISC chips made by Hewlett Packard, Sun, Motorola and others may be 
used in the specific computer. 

The ROM 23 contains, among other codes, the Basis Input-Output System 
(BIOS) which controls basic hardware operations, such as the interaction of the 
processor and the disk drives and the keyboard. The RAM 24 is the main memory 
into which the operating system and application programs are loaded. The memory 
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management chip 25 is connected to the system bus 2 1 and controls direct memory 
access operations including passing data between the RAM 24 and hard disk drive 
26 and floppy disk drive 27. The CD-ROM 32 also coupled to the system bus 21 is 
used to store a large amount of data, e.g., a multimedia program or presentation. 



keyboard contro ler 28, the mouse controller 29, the video controller 30, and the 
audio controller 3 1 . As might be expected, the keyboard controller 28 provides the 
hardware interfi ce for the keyboard 12, the mouse controller 29 provides the 
hardware interface for mouse 13, the video controller 30 is the hardware interface 
for the graphic iisplay device or monitor 14, and the audio controller 3 1 is the 
hardware interlace for the speakers 15. An I/O controller 40, such as a Token Ring 
Adapter, may t e included to enable communication over a network 46 to other 
similarly confi *ured data processors. 

One of the preferred implementations of the invention is as sets of 
instructions comprising Internet software resident in the random access memory 24 
of the computer 10. Alternately, the set of instructions may be stored in another 
computer readable memory, for example, in the hard disk drive 26, or in a 
removable memory, such as an optical disk for eventual use in the CD-ROM 32 or 




Also connected to this system bus 21 are various I/O controllers: the 
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in a floppy disk for eventual use in the floppy disk drive 27. Further, the set of 
instructions can be stored in the memory of another computer and transmitted in a 
transmission medium over a local area network, such as the Internet when desired 
by the user. One skilled in the art would appreciate that the physical storage of the 
sets of instructions physically changes the medium upon which it is stored 
electrically, magnetically, or chemically so that the medium carries computer 
readable information. While it is convenient to describe the invention in terms of 
instructions, symbols, characters, or the like, the reader should remember that all of 
these and similar terms should be associated with the appropriate physical 
elements. 

The present invention is incorporated in the Internet software, which 
includes the TCP/IP protocol and a browser. The program of the invention comes 
into operation when the computer 10 has made connection to a web page over the 
Internet and is about to transmit information to a server over the Internet. The 
server may be the web page server or it may be another server to which an Internet 
connection is made as a result of the computer being connected to a web page 
server. As shown in Fig. 2, which is a flow chart of the process of the invention, 
the Internet software is ready to transmit information assembled by the computer 
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10 to a server over the Internet in step 41 . The computer 10 enters step 41 when it 
has received a signal to transmit information over an established Internet 
connection, which signal may or may not have been inputted by the user. When 
the browser tries to transmit the information, the computer enters step 42 in which 

5 the program generates a menu page with a message on the monitor of the Internet 
processor. The message contains the address of the web page server to which the 

O information is being transmitted and sets forth the information about to be 

sis 5 
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y transmitted to the server. If the transmission is unsecured the message may also 

£j'- S 

warn the user of this fact. In the preferred embodiment, the program searches the 

ru 

1;0 information to be transmitted and highlights data within the displayed information 
j,jL which is identified by the program as potentially sensitive. In addition, the user is 
^ given a menu selection in the display (a) to continue with the transmission, or 

(b) to cancel the transmission. While the message is displayed, the program waits 

in step 43 for the user selection. If the user then clicks on the continue button with 
15 his mouse, the program proceeds into step 44 to transmit the information and if the 

user clicks on the cancel button with his mouse, the program branches to step 45 to 

cancel the transmission. 
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An example of the display provided in accordance with the present invention 
when the information about to be sent is shown below. 
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Security Information 
Server 

+ + 

Http ://www. compusa. com/compusa/order_status . asp 



Data 



[x] Show This Alert Next Time 



+ 4- 4- + 

Continue Cancel 

+ + + + 



-+ 



-4- 



ORDER NUMBERS 234567 

PASSWORD=xyzpdq 

USERID=TomFoolery 

H h 

+ . + 

Any information you submit is insecure and could be 
observed by a third party while in transit. If you are 
submitting passwords, credit card numbers, or other 
information you would like to keep private, it would 
be safer for you to cancel the submission. 



+ + 



+- 
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In the above example, the prospective transmission is unsecured and an 
appropriate warning is displayed to the user. In addition to notifying the user of 
the information to be transmitted and the server address to which the information is 
being sent, the display also gives the user the option of canceling the showing of 
the unsecured transmission alert the next time an unsecured transmission occurs. 
This option is provided by the legend "show this alert next time" with the selection 
box already designated with an "X". If the user does not want to show the alert 
next time, he deletes the.X in this box. 

The display provided to the user can also include a menu to permit the user 
to allow some of the information to be transmitted and some of the information to 
be withheld. An example of such a menu page is shown below: 
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+ + 

Security Information 

+ + 

Server 

+ . + 

Http://www.compusa.com/compusa/order_status.asp 
+ + 

Data 

+ + 

[X] ORDER NUMBER=1234567 
[X] PASSWORD=xyzpdq 
[X] USERID-TomFoolery 

+ + 

+ + 

The default condition of this menu page shows the respective items of 
information as already selected and all the information will be transmitted if the 
user actuates the continue button. If the user wants to transmit just some of the 
information, he has to delete the X's from those boxes corresponding to the items 
of information which he does not want to transmit. 

With the system of the invention as described above, whenever information 
is to be sent or posted from the user's Internet processor, the user is provided with 
the information of the server address and statement of the information being 

transmitted so that the user may make an informed decision as to whether or not he 
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wants to transmit the information. In this manner, the user can protect himself 
against inadvertently disclosing private or secret information by transmitting such 
information and also prevent his Internet processor from being used to send 
messages or information to the third parties without his knowledge or consent. 

The above description is of a preferred embodiment of the invention and 
modification of the invention may be made thereto without departing from the 
spirit and scope of the invention, which is defined in the appended claims. 
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